Lucene search
+L

4867 matches found

Code423n4
Code423n4
added 2023/07/10 12:0 a.m.15 views

Invariants doesn't checked

Lines of code Vulnerability details Impact Liquidity providers might lost their funds. Because wellFunction can be arbitrary. Proof of Concept I've asked publius about wellFunction, and he respond -- that anyone can create any wellFunction and pass it to the Well. So, let's consider for example...

6.7AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2023/07/08 6:12 p.m.10 views

smallbusinesshq.com.au Cross Site Scripting vulnerability OBB-3491799

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Schneier on Security
Schneier on Security
added 2023/07/07 11:11 a.m.19 views

The AI Dividend

For four decades, Alaskans have opened their mailboxes to find checks waiting for them, their cut of the black gold beneath their feet. This is Alaskas Permanent Fund, funded by the states oil revenues and paid to every Alaskan each year. Were now in a different sort of resource rush, with...

6.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/06/30 12:0 a.m.13 views

The vulnerability of the web interface of the microprogramming software for Cisco Small Business Series allows a perpetrator to execute arbitrary code with root privileges.

The vulnerability of the web interface of Cisco Small Business Series microprogramming software involves the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...

10CVSS8.9AI score0.10282EPSS
SaveExploits0References2Affected Software4
OSV
OSV
added 2023/06/28 9:15 p.m.9 views

CVE-2023-34650

PHPgurukl Small CRM v.1.0 is vulnerable to Cross Site Scripting XSS...

6.1CVSS5.8AI score0.00493EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/06/28 9:15 p.m.8 views

CVE-2023-34650

PHPgurukl Small CRM v.1.0 is vulnerable to Cross Site Scripting XSS...

6.1CVSS6.3AI score0.00493EPSS
SaveExploits0References3
NVD
NVD
added 2023/06/28 3:15 p.m.25 views

CVE-2023-20188

A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches could allow an authenticated, remote attacker to conduct a stored cross-site...

4.8CVSS4.8AI score0.00483EPSS
SaveExploits0References1
OSV
OSV
added 2023/06/28 3:15 p.m.9 views

CVE-2023-20188

A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches could allow an authenticated, remote attacker to conduct a stored cross-site...

4.8CVSS6.1AI score0.00483EPSS
SaveExploits0References1
Prion
Prion
added 2023/06/28 3:15 p.m.24 views

Cross site scripting

A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches could allow an authenticated, remote attacker to conduct a stored cross-site...

4.3CVSS4.8AI score0.00483EPSS
SaveExploits0References1Affected Software61
Cvelist
Cvelist
added 2023/06/28 12:0 a.m.38 views

CVE-2023-20188

A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches could allow an authenticated, remote attacker to conduct a stored cross-site...

4.8CVSS5.1AI score0.00483EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/06/28 12:0 a.m.11 views

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV320 and RV325 allows a hacker to execute arbitrary commands on the device.

The vulnerability of the web-based management interfaces for Cisco Small Business RV320 and RV325 routers is related to insufficient verification of data entered by users. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on behalf of the root user in the...

8.3CVSS7.5AI score0.28347EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
added 2023/06/28 12:0 a.m.33 views

CVE-2023-34650

PHPgurukl Small CRM v.1.0 is vulnerable to Cross Site Scripting XSS...

6.3AI score0.00493EPSS
SaveExploits0References2
CVE
CVE
added 2023/06/28 12:0 a.m.151 views

CVE-2023-20188

The CVE-2023-20188 issue affects Cisco Small Business 200 Series Smart Switches, 300 Series Managed Switches, and 500 Series Stackable Managed Switches. It is a web-based management interface stored XSS caused by insufficient input validation, exploitable by an authenticated user who views a page...

4.8CVSS4.8AI score0.00483EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/06/28 12:0 a.m.42 views

CVE-2023-34650

CVE-2023-34650 affects PHPgurukl Small CRM v1.0. Multiple connected sources indicate a Cross-Site Scripting (XSS) vulnerability, with CNNVD describing it as a stored XSS issue. NVD lists a CVSS v3.1 base score of 6.1 (Medium) and notes the attack vector is network with user interaction required. ...

6.1CVSS6.1AI score0.00493EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/06/28 12:0 a.m.11 views

PT-2023-24970 · Unknown · Phpgurukul Small Crm

Name of the Vulnerable Software and Affected Versions: PHPgurukl Small CRM version 1.0 Description: The issue is related to Cross Site Scripting XSS, which is a type of security vulnerability that can be exploited by attackers to inject malicious scripts into websites. No information is provided...

6.1CVSS6AI score0.00493EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/06/28 12:0 a.m.12 views

PHPGurukul Small CRM 跨站脚本漏洞

PHPGurukul Small CRM is a customer relationship management system. A security vulnerability exists in PHPgurukl Small CRM version 1.0, which stems from the presence of a stored cross-site scripting XSS vulnerability...

6.1CVSS5.9AI score0.00493EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/06/28 12:0 a.m.13 views

CVE-2023-34650

PHPgurukl Small CRM v.1.0 is vulnerable to Cross Site Scripting XSS...

6.7AI score0.00493EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/06/28 12:0 a.m.8 views

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV320 and RV325 allows a hacker to execute arbitrary commands on the device.

The vulnerability of the web-based management interfaces for Cisco Small Business RV320 and RV325 routers is related to insufficient verification of data entered by users. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on behalf of the root user in the...

8.3CVSS7.5AI score0.30386EPSS
SaveExploits0References3
Securelist
Securelist
added 2023/06/27 6:0 a.m.37 views

How cybercrime is impacting SMBs in 2023

According to the United Nations, small and medium-sized businesses SMBs constitute 90 percent of all companies and contribute 60 to 70 percent of all jobs in the world. They generate 50 percent of global gross domestic product and form the backbone of most countries economies. Hit hardest by the...

7.5AI score
SaveExploits0
Fedora
Fedora
added 2023/06/23 1:2 a.m.29 views

[SECURITY] Fedora 38 Update: tang-14-1.fc38

Tang is a small daemon for binding data to the presence of a third party...

5.3CVSS7AI score0.00568EPSS
SaveExploits1
Rows per page
Query Builder